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-REQUEST A NEW TEK 
-GENERATE A NEW TEK 
-ENCRYPT NEW KEK 
USING CURRENT KEK 
-MULTICAST THE ENCRYPTED 
KEK TO ALL THE AREA 
MEMBERS 

-RESET EKOL AND VKOL 
LISTS 

-UNICAST THE NEW KEK TO 
JOINING MEMBER USING A 
SECURE CHANNEL 
-CALL TEK_FORWARDING 
PROCESS 




THE ENTERING MEMBER IS 
REMOVED FROM VKOL/EKOL 
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-VEK CHANGE=TRUE 



UNICAST VEK TO THE I 
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CURRENT TEK IS OPTIONALLY 
SENT TO ENTERING 
MOBILE MEMBER 






f 


1 



KELLIL ET AL. 
CML01203EP 



FIG. 8 




( END ) 



KELLIL ET AL. 
CML01203EP 



7/7 



FIG. 9 



-ENCRYPT TEK WITH KEK 
-MULTICAST ENCRYPTED TEK 
TO AREA MEMBERS 



RECEPTION OF NEW TEK 




-ENCRYPT TEK WITH KEK 
-ENCRYPT TEK WITH VEK 
-j++,//jINITIALIZEDTO 0 
-IF j=2|TEK_ENCRYPTED_BY_ 

VEK=TRUE; j=0;| 
-MULTICAST ENCRYPTED TEK+ 

"VEKCHANGE" VALUE TO 

AREA MEMBERS 
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DECRYPT THE NEW TEK 
USING KEK 



VEK=DERIVED(VEK) 



-DECRYPT THE NEW TEK 
USING VEK 

-VEK_USED=TRUE; (CURRENT 
VEK WAS USED TO DECRYPT 
THE TEK) 
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